with refcnt 1 The address of the function is taken from the surface structur and now points to 0xaaaaaaaa. (I do not expect a reply to this mail. I write it for a few reasons: *Someone might have seen something like this allready *Someone(maybe I) might search the archives sometimes and find this information usefull. If I shouldn't do so, just tell me)